New Post: Customer Isolation

The short answer is Yes. We have had to do something similar for a client that had multiple sub-divisions.

It does include a complicated permissions configuration though, and we had to inject our own FormsAuthentication implementation on the frontend to enforce this. Composite is very flexible though, it does not restrict from building on top or around it at all. :)